6f96cc83d5d7ae6e0e9fb592fc010a33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f96cc83d5d7ae6e0e9fb592fc010a33_JaffaCakes118
Size

312KB
MD5

6f96cc83d5d7ae6e0e9fb592fc010a33
SHA1

f067195dd0277f94500e0ee9424c6bca6b30f62d
SHA256

7c4f63a25d56b9a2b81372ed9764502472e4e5992c930761a2ab8e4a707cfd1d
SHA512

5570263ad83cf3b5f407abb5dc366b1cd3c676ebd5295dbf89bcdd4713aa135b8a9e3ffa3d007afad926f6787d6ef0d1916610ff986934efd1f66c676a6e0639
SSDEEP

6144:Fy4KS4xrUHpigwOUlHyw2cJiXZXkOKNbA5+icZdzWSH7Z2V:Fx+rUHpq2cJilEk5+VZVqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/new smiles.exe

Files

6f96cc83d5d7ae6e0e9fb592fc010a33_JaffaCakes118
.rar
Y!M Lover - In love with Yahoo! Messenger (ro).url
new smiles.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ